| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | replace our obsolete smartcard code with PKCS#11. |   markus | 2010-02-08 | 1 | -60/+24 | |
| | | | | | | | | | | ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/pkcs-11v2-20.pdf ssh(1) and ssh-keygen(1) use dlopen(3) directly to talk to a PKCS#11 provider (shared library) while ssh-agent(1) delegates PKCS#11 to a forked a ssh-pkcs11-helper process. PKCS#11 is currently a compile time option. feedback and ok djm@; inspired by patches from Alon Bar-Lev | |||||
| * | when converting keys, truncate key comments at 72 chars as per RFC4716; |   djm | 2010-01-11 | 1 | -4/+8 | |
| | | | | | bz#1630 reported by tj AT castaglia.org; ok markus@ | |||||
| * | force use of correct hash function for random-art signature display | djm | 2009-08-27 | 1 | -4/+4 | |
| | | | | | | | as it was inheriting the wrong one when bubblebabble signatures were activated; bz#1611 report and patch from fwojcik+openssh AT besh.com; ok markus@ | |||||
| * | alphabetize includes; reduces diff vs portable and style(9). ok stevesk djm |   dtucker | 2009-06-22 | 1 | -2/+2 | |
| | | ||||||
| * | Added missing newlines in error messages. |   tobias | 2009-02-21 | 1 | -8/+8 | |
| | | | | | ok dtucker | |||||
| * | spelling/typo in comment |   stevesk | 2008-11-07 | 1 | -2/+2 | |
| | | ||||||
| * | Change "ssh-keygen -F [host] -l" to not display random art unless |   sthen | 2008-07-13 | 1 | -3/+5 | |
| | | | | | | | | -v is also specified, making it consistent with the manual and other uses of -l. ok grunk@ | |||||
| * | make ssh-keygen -lf show the key type just as ssh-add -l would do it |   grunk | 2008-06-12 | 1 | -5/+7 | |
| | | | | | ok djm@ markus@ | |||||
| * | ssh-keygen would write fingerprints to STDOUT, and random art to STDERR, | grunk | 2008-06-11 | 1 | -4/+7 | |
| | | | | | | | | that is not how it was envisioned. Also correct manpage saying that -v is needed along with -l for it to work. spotted by naddy@ | |||||
| * | ssh-keygen -lv -f /etc/ssh/ssh_host_rsa_key.pub | grunk | 2008-06-11 | 1 | -3/+3 | |
| | | | | | would not display you the random art as intended, spotted by canacar@ | |||||
| * | Introduce SSH Fingerprint ASCII Visualization, a technique inspired by the | grunk | 2008-06-11 | 1 | -4/+17 | |
| | | | | | | | | | | | | | | | | | | | | | | | | graphical hash visualization schemes known as "random art", and by Dan Kaminsky's musings on the subject during a BlackOp talk at the 23C3 in Berlin. Scientific publication (original paper): "Hash Visualization: a New Technique to improve Real-World Security", Perrig A. and Song D., 1999, International Workshop on Cryptographic Techniques and E-Commerce (CrypTEC '99) http://sparrow.ece.cmu.edu/~adrian/projects/validation/validation.pdf The algorithm used here is a worm crawling over a discrete plane, leaving a trace (augmenting the field) everywhere it goes. Movement is taken from dgst_raw 2bit-wise. Bumping into walls makes the respective movement vector be ignored for this turn, thus switching to the other color of the chessboard. Graphs are not unambiguous for now, because circles in graphs can be walked in either direction. discussions with several people, help, corrections and ok markus@ djm@ | |||||
| * | support -l (print fingerprint) in combination with -F (find host) to | djm | 2008-05-19 | 1 | -7/+23 | |
| | | | | | | search for a host in ~/.ssh/known_hosts and display its fingerprint; ok markus@ | |||||
| * | unbreak line numbering (broken in revision 1.164), fix error message | djm | 2008-01-19 | 1 | -6/+7 | |
| | | ||||||
| * | when hashing individual hosts (ssh-keygen -Hf hostname), make sure we | djm | 2008-01-19 | 1 | -3/+4 | |
| | | | | | | | hash just the specified hostname and not the entire hostspec from the keyfile. It may be of the form "hostname,ipaddr", which would lead to a hash that never matches. report and fix from jp AT devnull.cz | |||||
| * | handles zero-sized strings that fgets can return |   chl | 2007-10-02 | 1 | -9/+7 | |
| | | | | | | | | | properly removes trailing newline removes an unused variable correctly counts line number "looks ok" ray@ markus@ | |||||
| * | use strcspn to properly overwrite '\n' in fgets returned buffer |   gilles | 2007-09-11 | 1 | -5/+3 | |
| | | | | | ok pyr@, ray@, millert@, moritz@, chl@ | |||||
| * | sort synopsis and options in ssh-agent(1); usage is lowercase |   sobrado | 2007-09-09 | 1 | -2/+2 | |
| | | | | | ok jmc@ | |||||
| * | spaces | stevesk | 2007-01-21 | 1 | -3/+3 | |
| | | ||||||
| * | more secsh -> rfc 4716 updates; |   jmc | 2007-01-12 | 1 | -3/+3 | |
| | | | | | | spotted by wiz@netbsd ok markus | |||||
| * | spaces | stevesk | 2007-01-03 | 1 | -3/+3 | |
| | | ||||||
| * | remove small dead code; arnaud.lacombe.1@ulaval.ca via Coverity scan | stevesk | 2007-01-03 | 1 | -4/+3 | |
| | | ||||||
| * | use argc and argv not some made up short form |   deraadt | 2006-11-14 | 1 | -6/+6 | |
| | | ||||||
| * | add missing checks for openssl return codes; with & ok djm@ | markus | 2006-11-06 | 1 | -2/+3 | |
| | | ||||||
| * | almost entirely get rid of the culture of ".h files that include .h files" | deraadt | 2006-08-03 | 1 | -4/+2 | |
| | | | | | | ok djm, sort of ok stevesk makes the pain stop in one easy step | |||||
| * | move #include <stdio.h> out of includes.h | stevesk | 2006-08-01 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <stdlib.h> out of includes.h | stevesk | 2006-07-26 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <sys/param.h> out of includes.h | stevesk | 2006-07-26 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <string.h> out of includes.h | stevesk | 2006-07-22 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <unistd.h> out of includes.h | stevesk | 2006-07-17 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <errno.h> out of includes.h; ok markus@ | stevesk | 2006-07-11 | 1 | -1/+2 | |
| | | ||||||
| * | move #include <fcntl.h> out of includes.h | stevesk | 2006-07-09 | 1 | -1/+2 | |
| | | ||||||
| * | move #include "dns.h" up | stevesk | 2006-07-06 | 1 | -2/+2 | |
| | | ||||||
| * | move #include <pwd.h> out of includes.h; ok markus@ | stevesk | 2006-07-06 | 1 | -1/+3 | |
| | | ||||||
| * | fix leak; coverity via Kylene Jo Hall | markus | 2006-05-17 | 1 | -2/+4 | |
| | | ||||||
| * | Correctly handle truncated files while converting keys; ok djm@ | dtucker | 2006-03-30 | 1 | -1/+3 | |
| | | ||||||
| * | cast strtonum() result to right type | deraadt | 2006-03-25 | 1 | -5/+6 | |
| | | ||||||
| * | Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that | djm | 2006-03-25 | 1 | -0/+1 | |
| | | | | | Theo nuked - our scripts to sync -portable need them in the files | |||||
| * | annoying spacing fixes getting in the way of real diffs | deraadt | 2006-03-20 | 1 | -3/+4 | |
| | | ||||||
| * | RCSID() can die | deraadt | 2006-03-19 | 1 | -1/+0 | |
| | | ||||||
| * | if no key file are given when printing the DNS host record, use the |   jakob | 2006-03-15 | 1 | -10/+32 | |
| | | | | | host key file(s) as default. ok djm@ | |||||
| * | Make ssh-keygen handle CR and CRLF line termination when converting IETF | dtucker | 2006-03-13 | 1 | -9/+33 | |
| | | | | | | format keys, in adition to vanilla LF. mindrot #1157, tested by Chris Pepper, ok djm@ | |||||
| * | move #include <sys/stat.h> out of includes.h; ok markus@ | stevesk | 2006-02-20 | 1 | -1/+4 | |
| | | ||||||
| * | Populate default key sizes before checking them; from & ok tim@ | dtucker | 2005-11-29 | 1 | -3/+3 | |
| | | ||||||
| * | Enforce DSA key length of exactly 1024 bits to comply with FIPS-186-2, | dtucker | 2005-11-28 | 1 | -2/+4 | |
| | | | | | | | increase minumum RSA key size to 768 bits and update man page to reflect these. Patch originally bz#1119 (senthilkumar_sen at hotpop.com), ok djm@, grudging ok deraadt@. | |||||
| * | generate a protocol 2 RSA key by default | djm | 2005-10-31 | 1 | -5/+4 | |
| | | ||||||
| * | no need to escape single quotes in comments, no binary change | djm | 2005-10-30 | 1 | -2/+2 | |
| | | ||||||
| * | no trailing "\n" for log functions; ok djm@ | stevesk | 2005-10-14 | 1 | -3/+3 | |
| | | ||||||
| * | change DSA default back to 1024, as it's defined for 1024 bits only | markus | 2005-10-07 | 1 | -3/+9 | |
| | | | | | | | | and this causes interop problems with other clients. moreover, in order to improve the security of DSA you need to change more components of DSA key generation (e.g. the internal SHA1 hash); ok deraadt | |||||
| * | ensure that stdio fds are attached; ok deraadt@ | djm | 2005-09-13 | 1 | -1/+4 | |
| | | ||||||
| * | knf says that a 2nd level indent is four (not three or five) spaces | djm | 2005-07-17 | 1 | -2/+2 | |
| | | ||||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |